Senior Compliance Analyst

Snowflake

. Own and maintain core FedRAMP authorization artifacts, including the System Security Plan (SSP), Contingency Plan (ISCP), and Incident Response Plan (IRP), keeping them accurate and updated annually .

Posted 10/8/2026full-timeUnited StatesSenior💰 $152,000 - $218,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing FedRAMP authorization artifacts and compliance initiatives, with a strong focus on risk management and governance in public sector environments. Proficient in coordinating assessments and influencing cross-functional teams to ensure adherence to federal mandates.

Highest-signal resume keywords

FedRAMP Authorization ProcessNIST SP 800-53 ControlsRisk ManagementCISSP CertificationCMMC Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

System Security Plan (SSP)Plans of Action and Milestones (POA&M)Incident Response Plan (IRP)Contingency Plan (ISCP)Audit-Ready Governance ArtifactsGap AnalysisTechnical Remediation RoadmapsCompliance Workflows AutomationContinuous Monitoring3PAO Coordination

Soft Skills

Organizational SkillsStakeholder InfluenceCommunication Skills

Certifications & Qualifications

CISSPCISMCISA

Industry Keywords

Public Sector ComplianceFederal MandatesDoD Impact Level AuthorizationsGovernance, Risk, and Compliance (GRC)Federal Information Processing Standards (FIPS) 140-3

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Own and maintain core FedRAMP authorization artifacts, including the System Security Plan (SSP), Contingency Plan (ISCP), and Incident Response Plan (IRP), keeping them accurate and updated annually
Manage the lifecycle of Plans of Action and Milestones (POA&M), tracking findings, risks, and remediation commitments through closure
Coordinate annual 3PAO assessments and continuous monitoring as the primary liaison between Snowflake, assessors, and federal agency stakeholders
Advise Engineering and Operations teams so cloud configurations meet federal and DoD mandates, including FIPS 140-3 validation, boundary protection, access control, logging, and monitoring
Perform gap analyses for new or evolving public sector requirements, including CMMC, GovRAMP, and FedRAMP Consolidated Rules
Define technical remediation roadmaps
Respond to customer and regulator inquiries about Snowflake’s public sector security and compliance obligations
Build self-service resources for customers and field teams
Align IT, Legal, Product, Security, and Engineering around public sector compliance initiatives

Requirements

What you’ll need

5+ years of experience in risk management, compliance, GRC, or a related governance function within a regulated or public sector environment preferred
Working knowledge of NIST SP 800-53 controls and the FedRAMP authorization process
Experience contributing to SSPs, POA&Ms, contingency plans (ISCP), and incident response plans (IRP)
Experience writing and maintaining audit-ready governance artifacts, including policies, standards, procedures, and control narratives
Experience coordinating with 3PAOs, auditors, or assessors during annual assessments or continuous monitoring cycles
Ability to influence stakeholders across Engineering, IT, Legal, and Security to drive control implementation and remediation without direct authority
Strong organizational skills, with the ability to manage multiple concurrent audit and assessment timelines and track findings through closure
Experience using AI to automate or streamline manual compliance workflows
CISSP, CISM, CISA, or other information security certifications
Experience with DoD Impact Level authorizations and CMMC certification
Must currently be authorized to work in the United States
Must be a U.S. person or meet applicable authorization requirements for the role
Must reside within commuting distance of, or be open to relocation to, a designated Snowflake office

Benefits

Comp & perks

Salary and benefits information is provided on the Snowflake Careers Site
Hybrid work arrangement